Ochrana osobních údajů

The following companies of the Pfeifergroup in Germany have a data privacy officer who can be contacted in case of any questions about the data processing of these companies, at the following details.

Contact details of data privacy officer
2B Advice GmbH
Joseph-Schumpeter-Allee 25
D-53227 Bonn
E-mail: pfeifergroup@2b-advice.com
Telephone: +49 228 926165 – 120

Pfeifer Holz GmbH
Mühlenstraße 7
D-86556 Unterbernbach

Pfeifer Holz Lauterbach GmbH
Am Hällstein 1
D-36341 Lauterbach

Pfeifer Holz Schlitz GmbH & Co KG
Bahnhofstraße 63
D-36110 Schlitz

Pfeifer Timber GmbH
Mühlenstraße 7
D-86556 Unterbernbach

Euroblock Verpackungsholz GmbH
Mühlenstraße 7
D-86556 Unterbernbach

It is possible to contact the data privacy coordinator for the companies listed below with their head office in Austria and the Czech Republic at the e-mail address datenschutz@pfeifergroup.com.

Pfeifer Holding GmbH (parent company)
Fabrikstraße 54
A-6460 Imst

Pfeifer Holz GmbH & Co KG
Fabrikstraße 54
A-6460 Imst

Pfeifer Holz s.r.o.
Chanovice 102
CZ-34101 Horažďovice

You can contact the data protection coordinator for the company listed below, which is based in Finland, at the e-mail address dataprivacy.nordics@pfeifergroup.com.

Pfeifer Nordics Oy
Kemijärventie 73
93600 Kuusamo

When you send us e-mails, these are processed on IT systems that are made available by a service provider on servers in the cloud.

There are order processing contracts with this service provider and further subcontractors according to Art. 28 GDPR. This ensures a suitable data protection level. This comprises appropriate technical and organisational measures to safeguard your data.

Service providers such as Microsoft in the USA may be forced on the basis of national legislation to transmit data from the cloud to US security authorities. It is possible that we will not be informed of these circumstances and so no legal measures may be instigated.

We kindly request that you observe this and do not send us sensitive information by e-mail.

Sensitive data, especially categories of personal data as defined by Art. 9 par. 1 GDPR such as information about religious or trade union affiliation, is not collected in this manner.

Personal data pertaining to children or minors is only collected if they register in the career portal or use or communication channels.

Cookies are files that are deposited by our website or by the customer portals on your computer while you are accessing the site. These files store information that make the use of this page more efficient. The following cookies are used on the homepages of the Pfeifergroup.

Individual settings for the use of cookies can be made through this interface:

Cookie Settings

Marketing

Diese Cookies werden verwendet, um das Nutzerverhalten aufzuzeichnen. Diese Aufzeichnungen werten wir aus, um das Kundenerlebnis und unser Angebotsportfolio kontinuierlich zu verbessern. Außerdem ermöglicht uns das Tracking, Kunden mittels personalisierter Werbung über unsere Produkte zu informieren.

_fbp

Facebook / Gültigkeit: 1 Jahr

Facebook verwendet dieses Cookie um Benutzer mit personalisierter Werbung anzusprechen.

lidc

LinkedIn / Gültigkeit: 1 Jahr

Wird benutzt um den Benutzer an die gewünschte Adresse weiterzuleiten.

bcookie

LinkedIn / Gültigkeit: 1 Jahr

Speichert die Browser-ID.

_gat_UA-28242516-1

Google Tracking / Gültigkeit: Session

Bestimmte Daten werden nur maximal einmal pro Minute an Google Analytics gesendet. Solange dieses Cookie gesetzt ist, werden bestimmte Datenübertragungen unterbunden.

li_gc

Linkedin / Gültigkeit: 1 Jahr

Wird von Linkedin verwendet, um die Zustimmung der Besucher:innen zur Verwendung von Cookies für nicht essentielle Zwecke zu speichern

_pk_id.394.4826

Matomo / Gültigkeit: 1 Jahr

Dieses Cookie wird von der Software Matomo für die statistische Auswertung der Besucherzugriffe verwendet.

_pk_ses.394.4826

Matomo / Gültigkeit: Session

Speichert eine aktive Sitzung. Wenn dieses Cookie vorhanden ist, ist die Sitzung des aktuellen Besuches weniger als 30 Minuten alt. Die Besucherzahl wird im Cookie pk_id erhöht.

_gcl_au

Google AdSense / Gültigkeit: 1 Jahr

Wird von Google AdSense zum Experimentieren mit Werbungseffizienz auf Webseiten verwendet.

IDE

Google DoubleClick / Gültigkeit: 1 Jahr

Verwendet von Google DoubleClick um den Benutzers während der Anzeige oder nach dem Klicken auf eine der Werbeanzeigen des Anbieters zu tracken. Zweck ist die Messung der Wirksamkeit einer Werbung und die Anzeige einer zielgerichteten Werbung für den Benutzer.

test_cookie

Google DoubleClick / Gültigkeit: 1 Jahr

Wird testweise gesetzt, um zu prüfen, ob der Browser das Setzen von Cookies erlaubt. Enthält keine Identifikationsmerkmale.

Analyse-Cookies

Performance Cookies werden verwendet, um das Nutzerverhalten zu verbessern.

_ga

Google Tracking / Gültigkeit: 1 Jahr

Enthält eine zufallsgenerierte User-ID. Anhand dieser ID kann Google Analytics wiederkehrende User auf dieser Website wiedererkennen und die Daten von früheren Besuchen zusammenführen.

_gid

Google Tracking / Gültigkeit: 1 Tag

Enthält eine zufallsgenerierte User-ID. Anhand dieser ID kann Google Analytics wiederkehrende User auf dieser Website wiedererkennen und die Daten von früheren Besuchen zusammenführen.

_ga_EFEVC36NDJ

Google Tracking / Gültigkeit: 1 Jahr

Enthält eine zufallsgenerierte User-ID. Anhand dieser ID kann Google Analytics wiederkehrende User auf dieser Website wiedererkennen und die Daten von früheren Besuchen zusammenführen.

_ga_29X6774KVX

Google Tracking / Gültigkeit: 1 Jahr

Enthält eine zufallsgenerierte User-ID. Anhand dieser ID kann Google Analytics wiederkehrende User auf dieser Website wiedererkennen und die Daten von früheren Besuchen zusammenführen.

_ga_DT36QZ4Q4E

Google Tracking / Gültigkeit: 1 Jahr

Enthält eine zufallsgenerierte User-ID. Anhand dieser ID kann Google Analytics wiederkehrende User auf dieser Website wiedererkennen und die Daten von früheren Besuchen zusammenführen.

YouTube & Externe Medien

Cookies aus Drittländern sind Dateien von Websites außerhalb der EU oder des EWR. Sie können personenbezogene Daten sammeln und verarbeiten, ohne EU-Datenschutzvorgaben zu beachten. Nutzer müssen informiert werden und ihre Zustimmung geben.

VISITOR_INFO1_LIVE

YouTube / Gültigkeit: 1 Jahr

Versucht, die Benutzerbandbreite auf Seiten mit integrierten YouTube-Videos zu schätzen.

VISITOR_PRIVACY_METADATA

YouTube Cookie-Zustimmung / Gültigkeit: 1 Jahr

Speichert den Cookie-Zustimmungsstatus des Benutzers für die aktuelle Domäne

__Secure-ROLLOUT_TOKEN

YouTube / Gültigkeit: 1 Jahr

Dieses Cookie wird von YouTube verwendet, um die Einführung neuer Funktionen zu verwalten, die selektive Aktivierung neuer Funktionen zu ermöglichen und deren Leistung bei allen Nutzern zu überwachen. Es handelt sich um ein sicheres Cookie, das über HTTPS übertragen wird und zur Verbesserung der Plattformfunktionalität beiträgt, indem es kontrollierte Tests und schrittweise Aktualisierungen ermöglicht.

__Secure-YNID

YNID / Gültigkeit: 1 Jahr

Es ist ein YouTube-Cookie, das zur Verbesserung der Benutzererfahrung dient, indem es die Präferenzen des Videoplayers speichert und bei sicheren Anmeldungen sowie der Erkennung von Spam hilft.

Notwendig

Diese Cookies sind unerlässlich, damit unsere Website einwandfrei funktioniert. Wir speichern damit keine Daten, die Sie direkt identifizieren könnten. Ihrem Browser wird eine zufällig generierte ID zugeordnet, wodurch wir in der Lage sind, Ihnen bestimmte Funktionen anzubieten und Ihre vorgenommenen Einstellungen zu speichern.

tincx_cookie_notice_accepted
tincx Cookie Manager / Gültigkeit: 30 Tage
Die Cookies tincx_cookie_notice_accepted speichert die Auswahl des Cookie Consent. Diese Cookies werden nicht für Tracking verwendet.

This website is based on WordPress. A consent management tool is used to manage cookie consents. The cookie tincx_cookie_notice_accepted stores the users‘ selection regarding their consent to cookies and tracking functions. Users can decide for themselves whether optional cookies and tracking should be activated or not.

This website uses Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). The use comprises the operating mode “Google Analytics 4”. This makes it possible to assign data, sessions and interactions on several devices to a pseudonymous user ID and thereby to analyse the activities of a user across all devices.

Google Analytics uses so-called “cookies”, text files that are deposited on your computer and that enable an analysis of your use of the website. The legal basis for the use of Google Analytics is Art. 6 (1) (a) GDPR, namely your consent. The information generated by the cookie about your use of this website is as a rule transmitted to a Google server in the USA and stored there. The IP address of users is immediately abbreviated in the process, so that the identification of users through the IP address is no longer possible. Please note that you have the right to withdraw your consent at any time with effect for the future. The legitimacy of the processing that has taken place up until the withdrawal of consent remains unaffected. In case of the activation of IP anonymisation on this website, your IP address is abbreviated beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Upon instruction of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide further services to the website operator associated with website and Internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

The legal basis for the transmission of personal data to the USA is the adequacy decision of the European Commission dated 10 July 2023, available at: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en. On the basis of the adequacy decision, personal data can be transmitted securely from the EU to US enterprises participating in the EU-US data privacy framework. Google Inc. has entered the EU-US data privacy framework and is obliged to comply with various data protection principles which are set out in Appendix 1 of the adequacy decision. The list of companies who have joined the programme can be found at https://www.dataprivacyframework.gov/s/participant-search.

The data sent by us and linked with cookies are automatically erased after 14 months. The maximum lifespan of the Google Analytics cookies is 2 years. The erasure of data whose retention period has been reached is automatic once a month.

You can find further information about terms of use and data privacy when using Google Analytics at https://www.google.com/analytics/terms/de.html. You can find further information about how Google uses data here: https://www.google.de/policies/privacy/partners/.

Our website uses functions of the web analysis services Google Analytics and Matomo. The provider of Google Analytics is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Matomo operates on servers of Cookis GmbH, 6460 Imst, Franz Xaver Rennstraße 4 (Bakehouse customers). For this purpose, cookies are used that enable an analysis of the use of the website by its users. The generated information is transferred to the server of the respective provider and is stored there.

You can prevent this by setting up your browse so that no cookies are stored there. Your IP address is recorded but then immediately pseudonymised by erasing the last eight bit. This means that only rough localisation is still possible.

Data processing takes place on the basis of Art. 6 par. 1 lit a (Consent) of GDPR.

As the privacy of our users is important to us, user data is pseudonymised.

This website uses Hotjar, a web analysis tool. It records in an anonymised form the interactions of randomly selected individual visitors with the Internet page. This results in a logging of e.g. mouse movements and clicks, with the aim of showing potential for improvement of the respective Internet page. In addition, information about the operating system, browser, incoming and outgoing links, geographical origin, as well as the resolution and type of device is evaluated for statistical purposes. This information is not personally attributable and is not passed on to third parties by Hotjar.

You can prevent this by setting up your browse so that no cookies are stored there. Your IP address is recorded but then immediately pseudonymised by erasing the last eight bit. This means that only rough localisation is still possible.

Data processing takes place on the basis of Art. 6 par. 1 lit a (Consent) of GDPR.

You can find out more about data processing by Hotjar here.

Within our online offer, the so-called “Facebook pixel” of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited (formerly “Facebook Ireland Limited”, 4 Grand Canal Square, Dublin 2, Ireland).

If a user clicks on an advertisement posted by us that is displayed on Facebook, an addition is made to the URL of our linked page through the Facebook Pixel. Insofar as our page allows the sharing of data with Meta through the Pixel, this URL parameter is entered into the browser of the user via a cookie that is deposited by our linked page itself. This cookie is then read by Facebook Pixel and allows the data to be passed on to Facebook.

With the help of the Facebook Pixel it is possible on the one hand for Meta to ascertain the visitors to our online offer as a target group for displaying advertisements (so-called “Facebook Ads”). We use the Facebook Pixel accordingly to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have particular characteristics (e.g. interests in certain topics or products, according to the websites visited) that we transmit to Meta (so-called “customer audiences”). With the help of the Facebook Pixel, we would also like to ensure that our Facebook Ads correspond to the potential interest of the users and are not bothersome. We can therefore also evaluate the effectiveness of the Facebook advertisements for statistical and market research purposes by determining whether users are redirected to our website after clicking on a Facebook advertisement (so-called “conversion”).

The collected data is anonymous for us and therefore does not allow any conclusions about the identity of the users. However, the data is stored and processed by Meta, so that an association with the respective user profile is possible and Facebook can use the data for their own advertising purposes, in accordance with the Facebook data usage directive (https://www.facebook.com/about/privacy/). The data can enable Facebook and their partners to display advertisements on and outside of Facebook.

The data processing associated with the use of the Facebook Pixel is on the basis of your consent to the evaluation, optimisation and economic operation of our online offer and our advertising measures.

In addition, you can prohibit the display of advertisements by Meta and their partners and adjust the settings at https://www.facebook.com/ads/website_custom_audiences/.

The information generated by Meta is usually transmitted to a Meta server and stored there; it may also be transmitted to the servers of Meta Platforms Inc. in the USA. Facebook is certified under the EU-U.S. Data Privacy Framework, which means that it has undertaken to comply with European data protection standards. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework.

The LinkedIn Insight Tag is a small JavaScript code extract that you can add to your website to enable detailed campaign reports and gain valuable information about the visitors to your website. As a customer of LinkedIn marketing solutions, you can use the LinkedIn Insight Tag to track conversions, carry out a retargeting of your website visitors and gain additional information about the members who view your advertisements.

The LinkedIn Insight Tag enables the collection of data about visits to your website, including ZRL, referrer URL, IP address, device and browser properties (user agent), as well as time stamp. The IP addresses are shortened or (if they are used to reach members across different devices) hashed. The direct identifiers of the members are removed within seven days to pseudonymise the data. The remaining pseudonymised data is then erased within 180 days.

Data processing takes place on the basis of Art. 6 par. 1 lit a (Consent) of GDPR.

LinkedIn does not share any personal data with the owner of the website but only offers reports (in which you are not identified) about the website target group and campaign success. LinkedIn also offers a retargeting for website visitors, so that the owner of the website can display targeted advertising outside of their website with the help of this data, without the member being identified. We also use data that does not identify you to improve the relevance of advertisements and to reach members across different devices. Members of LinkedIn can control the use of their personal data for advertising purposes through their account settings.

This website uses the Google Tag Manager. Google Tag Manager is a solution with which marketers can manage website tags through an interface. The tool itself (that implements the tags) is a domain without cookies and does not store any personal data. The tool ensures the triggering of other tags that may collect data on their part. Google Tag Manager does not access this data. If a deactivation was carried out on a domain or cookie level, this continues to apply to all tracking tags that are implemented with Google Tag Manager.

Recipient: Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. So-called standard contract clauses were concluded with this service provider as suitable guarantees in accordance with Art. 46 GDPR. Further information about this is available here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

The legal basis is your consent to this data processing.

Our website uses plugins of the YouTube webpage operated by Google. The operator of the webpage is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection is established to the YouTube servers. The YouTube server is informed which of our pages you visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Please note that when you use YouTube, data is transmitted to the USA. This transfer takes place within the framework of the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection. Information on the EU-U.S. Data Privacy Framework can be found at: https://www.dataprivacyframework.gov/s.

Further information on the handling of user data can be found in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy/.

We use LinkTree on our Instagram page, a tool that allows us to compile a clear list of links to various target pages and integrate it in our Instagram biography. This tool is provided by Linktree Pty Ltd, a company headquartered in Australia.

Data collection and use:
LinkTree collects data about the click behaviour of users on the provided links. This data includes:

• Number of click views
• Places of origin of the users (in a general form)
• Types of end devices used

This data is used by LinkTree exclusively to analyse user behaviour and to optimise our online presence. The data helps us to understand what content our followers are interested in and how they arrive at our landing pages. No specific, person-related data is collected. The collected data is retained for a period of 90 days and is then automatically erased. We ourselves do not store this data in addition.

Cookies:
LinkTree does not deposit any cookies on the end devices of users.

Your rights and options:
You have the right to information about personal data relating to you that we may collect through the use of LinkTree. In addition, you have the right to rectification, erasure or restriction of the processing of this data, insofar as we are storing it.

Further detailed information on data collection and processing by LinkTree is available in their data privacy notice here: https://linktr.ee/s/privacy/.

Wir möchten Sie darüber informieren, welche Arten von personenbezogenen Daten zu welchen Zwecken und in welchem Umfang im Rahmen unseres Auftrittes auf TikTok verarbeitet werden:

1. Datenverarbeitung bei Anfragen über TikTok

Wenn Sie uns eine Anfrage über einen Kommentar auf der TikTok Seite oder als private Nachricht stellen, verarbeiten wir Ihre Daten (bspw. Ihren Account Namen), um Ihre Anfrage zu bearbeiten und Ihnen zu antworten. Sollte es für die Bearbeitung erforderlich sein, weitere persönliche Daten zu erheben, werden wir Sie ggf. bitten uns diese per E-Mail zukommen zu lassen. Zur Wahrung des Datenschutzes möchten wir Sie darum bitten, ihre persönlichen Daten nicht in öffentlichen Kommentaren anzugeben. Sofern dies dennoch geschieht, werden wir uns bemühen den betreffenden Kommentar zeitnah zu verbergen.

Ihre personenbezogenen Daten verarbeiten wir auf der Grundlage unseres berechtigten Interesses i.S.d. Art. 6 Abs. 1 lit. f DS-GVO an der Beantwortung unserer Kunden- und Interessentenanfragen. Ihre Daten werden von uns bis zum Entfall des Zweckes, für den Sie erhoben wurden, gespeichert.

2. TikTok Analytics

Als Betreiber unseres TikTok Auftrittes haben wir Zugriff auf TikTok Analytics. Hierdurch erhalten wir anonymisierte Nutzungsstatistiken von Usern, die uns Auskunft über Interaktionen mit unserer TikTok Page bzw. mit unseren Inhalten geben.

Diese Daten werden durch den Einsatz von sogenannten Cookies erfasst, die von TikTok gesetzt werden und zuordnungsfähige Benutzer-IDs enthalten. TikTok verwendet diese Cookies zur Erstellung der TikTok Analytics und verarbeitet dabei die sogenannten „Engagement-Daten“. Diese können einige oder alle der folgenden Informationen enthalten:

Interaktionen von Personen:

• Besuche von Inhalten, die von einem TikTok Account bereitgestellt werden
• Likes (Inhalte, Kommentare)
• Teilen von Inhalten
• Klicks im TikTok Account oder der Inhalte
• Beginn einer Kommunikation mit dem TikTok Account
• Informationen rund um das Interaktionsverhalten (z.B.: Datum und Uhrzeit der Aktion; Betrachtungsdauer; Land/Stadt; Alters-/Geschlechtsgruppe; Nutzerinteressen; Gerätetyp des Nutzers; und Quelle der Inhaltsansichten)

Wir erhalten dabei keinen direkten Zugriff auf diese durch TikTok gesammelten Informationen, sondern bekommen hierüber anonymisierte Statistiken von TikTok bereitgestellt.

In Bezug auf die Erhebung von Daten und deren Zusammenführung in anonymisierte TikTok Analytics sind wir als Betreiber der TikTok Page für die Datenverarbeitung gemeinsam mit TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irland i.S.d. Art. 26 DS-GVO verantwortlich. Die von uns diesbezüglich geschlossene Vereinbarung über die gemeinsame Verantwortlichkeit finden Sie in vollständiger Fassung unter: TikTok Analytics Joint Controller Addendum | TikTok

Die Erhebung der gesammelten Daten und deren Zusammenfassung in anonymisierten Statistiken dient dem Zweck unsere User besser zu verstehen und Erkenntnisse darüber zu erlangen, welche Inhalte für unser Publikum von besonderem Interesse sind. Wir verarbeiten diesbezüglich personenbezogene Daten auf der Grundlage unseres berechtigten Interesses i.S.d. Art. 6 Abs. 1 lit. f DS-GVO an der Abstimmung unseres Informationsangebotes auf die Bedürfnisse unserer User.

3. Hinweise zur Benutzeridentifikation durch TikTok

Sofern Sie bei TikTok angemeldet sind, werden Sie durch TikTok unter Zuhilfenahme einer Kennung markiert. Hierdurch kann TikTok nachvollziehen, ob Sie als Nutzer eingeloggt sind. Dies gilt grundsätzlich für die Nutzung von TikTok.

Sollten Sie dies nicht wünschen, können Sie sich abmelden und die Funktion „angemeldet bleiben“ deaktivieren, sowie zuzüglich Ihren Broser neu starten und von Ihrem Gerät die vorhandenen Cookies löschen. Dadurch werden Informationen, die Sie unmittelbar identifizierbar machen gelöscht und Sie können unsere TikTok Page nutzen, ohne, dass Ihre TikTok-Kennung erkennbar wird. Sofern Sie dann mit unseren Inhalten interagieren möchten, müssen Sie sich erneut anmelden und werden für TikTok wieder als Nutzer erkennbar.

4. Datenübermittlungen

Bitte beachten Sie, dass TikTok personenbezogene Daten auch in Länder außerhalb des Europäischen Wirtschaftsraums übermitteln kann. Zur Absicherung dieser Übermittlungen nutzt TikTok die sogenannten Standardvertragsklauseln (SCC). Diese SCC sind von der Europäischen Kommission festgelegte vertragliche Regelungen, die sicherstellen, dass bei der Übermittlung personenbezogener Daten in Drittländer ein dem EU-Datenschutz vergleichbares Schutzniveau eingehalten wird.

Für weitere Informationen zur Datenverarbeitung durch TikTok, verweisen wir Sie auf die TikTok-Datenschutzrichtlinie, die Sie unter folgendem Link einsehen können: https://www.tiktok.com/legal/page/eea/privacy-policy/en?tid=131171655.

Content from Instagram, which is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is integrated on some pages of this website.

This always assumes that Instagram recognizes the IP address of the user. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, for example for statistical purposes. Insofar as we are aware of this, we will inform users accordingly.

If you are logged in to Instagram with your own account, Instagram may assign information about your user behavior to your personal user account. You can prevent this by logging out of your user account before playing the Instagram content published on our website. The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options to protect your privacy can be found in Instagram’s data protection information: Data Policy | Instagram Help Center (facebook.com).

The data is transmitted to the USA (to Meta Platforms Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA). Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

If you have consented to the processing of your personal data for one or more specific purposes, the processing of your data by us is permissible (Art. 6 par. 1 line a GDPR). You can withdraw this consent at any time in relation to the future (Art. 7 par. 3 GDPR), without incurring for yourself other than the transmission costs according to the basic tariffs (costs of your Internet connection). The withdrawal of your consent does not affect the legitimacy of processing that took place up until the revocation.

You have the possibility to subscribe to our newsletter through our website. To do so, we need your e-mail address and your declaration that you agree to receiving the newsletter. To provide you with targeted information, we also collect and process voluntarily given details such as browser language and name.

As soon as you have subscribed to the newsletter, we send you a confirmation e-mail with a link to confirm the registration.

You can cancel the newsletter subscription at any time. Please send your cancellation to the following e-mail address: datenschutz@pfeifergroup.com. We then erase your data immediately in relation to the newsletter mailing.

Contact information is stored in a structured manner through the website (contact forms) or through the direct contact with sales staff. All enquiries received through the website are checked in accordance with data privacy (double opt-in procedure).

On the one hand, this information is used in newsletter campaigns. Depending on the contact interest, customer segments are generated and specific online marketing materials are displayed to them. For each of these e-mails, an opt-out link is provided. This leads to a contact profile in which the contact can define their communication preferences. The success of the newsletter campaigns is measured by means of click rates.

Furthermore, Dynamics 365 is used in order to assign data entered through contact queries via the website to a responsible salesperson. The latter then has the possibility to view this data through an app and to contact the prospective customer. The salesperson can also directly store trade fair contacts in this app to ensure structured follow-up.

The processing of data on business cards (surname, first name, e-mail address, telephone number and address, if applicable) by us is on the basis of your granted consent pursuant to Art. 6 par. 1 lit. a GDPR as well as our legitimate interest according to Art. 6 par. 1 lit. f GDPR in building up mutual business contacts.

Your data will be stored, unless you withdraw your consent, for the intended purpose until it is no longer required for the purpose of its collection and there are no statutory retention periods that prohibit erasure.

Your data will not be passed on to other recipients.

If you register for one of the webinars that we offer, we will process the data you provide that is necessary for participation in the webinar on the basis of your consent pursuant to Article 6 par. 1 lit. a GDPR.

If you register for one of our webinars, your data that is necessary for the purpose of organising and carrying out the webinar is transmitted to Zimtfilm GmbH and Zoom Communications Inc.

Zimtfilm Gmbh provides us with support for organising the webinars. We have concluded an order processing contract with Zimtfilm GmbH.

In order to carry out webinars, Zimtfilm GmbH uses Zoom, offered by Zoom Video Communications Inc. Zimtfilm GmbH has concluded an order processing contract with Zoom Video Communications Inc., which acts as a data sub-processor of our company for carrying out the webinars we offer. The adequacy decision of the EU Commission for the USA is the framework for the data transmission to Zoom in the USA, as Zoom Video Communications Inc. is certified in accordance with the EU-USA agreement. In addition, Zoom points out that standard contract clauses of the EU Commission have been concluded in case of further data transmission within the Zoom Group between the companies of the Zoom Group.

For further information about data processing by Zimtfilm GmbH and Zoom Video Communications Inc., see: https://zimtfilm.com/datenschutz and https://www.zoom.com/de/trust/privacy/privacy-statement/.

We process your data to be able to fulfil our contracts (according to Art. 6 par. 1 line b GDPR). This also applies to details that you provide us with as part of precontractual correspondence. This includes making contact on your part for the purpose of applying for a position we have advertised. The concrete purposes of the data processing depend on the respective product and the request made and can also be used to analyse your requirements and evaluate which products and services are suitable for you. To carry out the contractual relationship (precontractual measures and concluding the purchase contract), we need your name, your address, your telephone number and e-mail address so that we can contact you.

We also need your personal data to evaluate whether and which products and services we can and may offer you (precontractual measures for putting together an offer).

You can view details of the respective purposes of the data processing in the contract documents and our General Terms and Conditions, as well as this data privacy statement.

We process your data that you disclose to us as part of making contact for the purpose of applying for an advertised position. For job advertisements, we indicate a telephone number on the job profile which applicants can contact via WhatsApp to establish initial contact and potentially make an appointment for a job interview. For this purpose we use the messaging service WhatsApp-Business provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. As part of the use of WhatsApp-Business, we process your private telephone number, your profile picture, your first name and surname. Your data is always only used for the purpose of your application. There is no passing on to third parties. Your contact details and chat history will be erased, subject to the legal retention period and the conclusion of the application procedure.

Please note that WhatApp Business in principle receives access to the address books of the mobile end devices used by the users if they agree to the synchronisation of their address books. To ensure the security of your data and protect it against transmission to the parent company Meta Platforms Inc. in the USA, we have not consented to the address book synchronisation on the end devices used by us and for WhatsApp Business.

Therefore, your data is not transmitted to third parties. Please note that for this reason only you can establish an initial contract with us.

The purpose and scope of the data collection and the further processing and use of the data by WhatsApp as well as your respective rights and settings options to protect your privacy are set out in the data privacy specifications of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy.

We process your data that you have sent to us as part of your application, to check whether your subject qualifications are suitable for the advertised position. We only use your information for the application procedure and keep it in your personnel file when concluding a contract. If no appointment is made, your information is erased or destroyed, unless you give your consent to it being stored in the applicant database. We will not use your applicant information for any other purpose than for carrying out the application procedure.

As a company, we are subject to a range of legal regulations. To meet our legal obligations, we process your personal data insofar as is necessary according to Art. 6 par.1 line c GDPR.

If you access our website, your browser technically transmits certain information to our web server in order to provide you with the information you requested. To enable you to visit the website, the following information is collected, temporarily stored and used:

• IP address
• Date and time of enquiry
• Time zone difference to Greenwich Mean Time (GMT)
• Content of enquiry (concrete page)
• Operating system and its interface
• Access status / HTTP status code
• Transmitted data volume
• Website the enquiry is coming from
• Browser, language and version of browser software

To protect our legitimate interests, we will store the details above for a limited period so that in the event of unauthorised access or an access attempt to our server it is possible to derive the personal data (art. 6 (1) (f) GDPR).

Your requirements are important to us, and we try to provide you with information about products and services that are precisely tailored to you. To do so, we use the knowledge gained from our joint business relationship as well as from our market research and process your personal data for this purpose on the basis of our legitimate interest (Art. 6 par. 1 line f GDPR). The key aim of this is to adapt our product suggestions to your requirements. With regard to this, we guarantee that we always process the data in accordance with the applicable data privacy law. Important: You can object at any time to the use of your personal data for this purpose (Art. 21 GDPR).

What do we analyse and process concretely?

• Results of our marketing campaigns to assess their efficiency and relevance;
• we analyse the potential demand for our products and services.

We use your personal data in the following cases, among others:

• We analyse your data to protect you or your company against fraudulent activities. This can happen e.g. if you have become a victim of identity theft or unauthorised persons have gained access to your user account through other means;
• to improve the reliability of our web applications, our IT support works closely with you in case of technical problems. In relation to this, we also evaluate logging of page call-ups, actions carried out etc.;
• to be able to ensure IT security;

We also use your personal data to be able to assess and prove facts in the event of possible legal disputes.

If you call us and your call cannot be answered immediately by our staff – for example, if the switchboard is busy, the person you wish to speak to is unavailable, or it is outside our office hours – an AI-powered telephone assistant will answer your call. At the start of the call, it will inform you that you are speaking to an AI system, take a note of your enquiry and either put you through to the relevant department or arrange for a call-back.

What data we process: We process the voice data from your call, the details you provide during the conversation (such as your name, company, call-back number, email address and your enquiry), as well as accompanying technical data such as the recognised language and the time of the call. To facilitate the conversation, your speech is converted into text in real time, processed by a language model, and the response is output as speech again. The conversation will only be recorded and a full transcript stored permanently if you give your express consent in advance. Without your consent, your call will proceed as normal and only your structured enquiry will be stored for the purpose of a callback.

Purposes and legal basis: We use the telephone assistant to ensure we are always available by telephone, to handle enquiries even where there are language or time-related barriers, and to prevent missed calls. The legal basis is our legitimate interest in ensuring we are reliably reachable and in the efficient handling of calls (Article 6(1)(f) of the GDPR). Where your enquiry relates to the initiation or performance of a contract with us, we also base the processing on Article 6(1)(b) of the GDPR. Any recording is made exclusively on the basis of your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time with future effect.

No automated decision-making, no analysis: The assistant does not make any decisions concerning you that have legal effect within the meaning of Article 22 of the GDPR; you can be put through to a member of staff at any time. No analysis of your emotions or mood takes place, nor is your voice recognised beyond the individual call.

Recipients: The telephone assistant is operated by fonio GmbH, Vienna, as a data processor on the basis of a contract pursuant to Article 28 of the GDPR. The application is operated in data centres within the EU (Germany and Finland). Additional service providers, some of which belong to US corporations, are used for speech processing; processing takes place via European locations. Where data is transferred to the USA in this context, this is done on the basis of the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework. Further information on the service providers used can be found at: Data Processing Agreement

Retention period: Voice data and call transcripts are stored only for short, specified periods and are subsequently deleted. Audio recordings are deleted 30 days after the call, and call transcripts 90 days after the call. The details collected for a call-back are deleted as soon as your enquiry has been dealt with and provided there are no statutory retention obligations to the contrary.

You have the right to receive information from us about which of your personal data we are processing. If this information is not or no longer correct, you can request rectification of the data or additions in case of incompleteness. If we have passed your data on to third parties, we inform the respective third parties of the applicable legal situation

Under the following circumstances, you can demand the immediate erasure of your personal data:

• if your personal data is no longer needed for the purposes for which it was collected;
• if you have withdrawn your consent and there is no other legal basis for processing the data;
• if you object to the processing and there are no overriding legitimate grounds for processing the data;
• if your data is processed unlawfully;
• if your personal data must be erased to fulfil legal obligations.

Please note that before erasing your data we must check that there is no legitimate reason for processing your personal data.

If the processing is in the public interest or on the basis of a balancing of interests, you have the right to object to the processing for reasons pertaining to your particular situation. Following an objection, we will no longer process your data unless we can prove mandatory grounds for processing your data that outweigh your interests, rights and freedoms, or because your personal data serves to make, exert or defend legal claims. The objection does not nullify the legitimacy of the processing already carried out up until the objection.

In cases in which your personal data is used for advertising campaigns, you can object at any time to this form of processing. We will then no longer process your personal data for these purposes.

The objection does not require a specific form and should be addressed to the e-mail address datenschutz@pfeifergroup.com

You have the right on request to receive personal data that you have given to us for processing in a transferable and machine-readable format.

We always try to process your enquiries and claims as quickly as possible to ensure your rights accordingly. However, depending on the volume of enquiries, it may take up to 30 days before we can provide further information in your case. If it should take longer, we will inform you duly about the reasons for the delay and discuss the further procedure with you.

In some cases, we may not or cannot provide you with any information. Insofar as legally permissible, we will notify you of the reason for declining information.

If you are still not satisfied with our answers and responses or believe that we are in contravention of applicable data privacy laws, you are entitled to lodge a complaint to our Data Protection Coordinator (datenschutz@pfeifergroup.com) or (if available) the Data Privacy Officer (pfeifergroup@2b-advice.com) as well as to a supervisory authority.

The supervisory authority responsible for us is:

RESPONSIBLE AUTHORITY for the companies

Pfeifer Holz GmbH
Pfeifer Timber GmbH
Euroblock Verpackungsholz GmbH

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Postfach 606, D-91511 Ansbach
Promenade 27 (Schloss), D-91522 Ansbach

RESPONSIBLE AUTHORITY for the companies

Pfeifer Holz Lauterbach GmbH
Pfeifer Holz Schlitz GmbH & Co KG

Der Hessische Datenschutzbeauftragte
Gustav-Stresemann-Ring 1, D-65189 Wiesbaden
Postfach 31 63, 65021 D-Wiesbaden

RESPONSIBLE AUTHORITY for the companies

Pfeifer Holding GmbH (Konzernmutter)
Pfeifer Holz GmbH & Co KG

Österreichische Datenschutzbehörde
Wickenburggasse 8
A-1080 Wien

RESPONSIBLE AUTHORITY for Pfeifer Holz s.r.o.

The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

RESPONSIBLE AUTHORITY for Pfeifer Nordics Oy

Office of the Data Protection Ombudsman
PL 800
00531 Helsinki
Finland

We always try to process your enquiries and claims as quickly as possible to ensure your rights accordingly. However, depending on the volume of enquiries, it may take up to 30 days before we can provide further information in your case. If it should take longer, we will inform you duly about the reasons for the delay and discuss the further procedure with you.

In some cases, we may not or cannot provide you with any information. Insofar as legally permissible, we will notify you of the reason for declining information.

If you are still not satisfied with our answers and responses or believe that we are in contravention of applicable data privacy laws, you are entitled to lodge a complaint to our Data Protection Coordinator (datenschutz@pfeifergroup.com) or (if available) the Data Privacy Officer (pfeifergroup@2b-advice.com) as well as to a supervisory authority.

The supervisory authority responsible for us is:

RESPONSIBLE AUTHORITY for the companies

Pfeifer Holz GmbH
Pfeifer Timber GmbH
Euroblock Verpackungsholz GmbH

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Postfach 606, D-91511 Ansbach
Promenade 27 (Schloss), D-91522 Ansbach

RESPONSIBLE AUTHORITY for the companies

• Pfeifer Holz Lauterbach GmbH
• Pfeifer Holz Schlitz GmbH & Co KG

Der Hessische Datenschutzbeauftragte
Gustav-Stresemann-Ring 1, D-65189 Wiesbaden
Postfach 31 63, 65021 D-Wiesbaden

RESPONSIBLE AUTHORITY for the companies

• Pfeifer Holding GmbH (Konzernmutter)
• Pfeifer Holz GmbH & Co KG

Österreichische Datenschutzbehörde
Wickenburggasse 8
A-1080 Wien

RESPONSIBLE AUTHORITY for Pfeifer Holz s.r.o.

The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

RESPONSIBLE AUTHORITY for Pölkky Oy

Office of the Data Protection Ombudsman
PL 800
00531 Helsinki
Finland

https://tietosuoja.flyhteystiedot